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DETAILED ACTION 

1. Claims 1-10, 17-23, 27, 28, 30-32, and 34 have been examined. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1-10, 17-23, 27, 28, 30-32, and 34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Balasubramaniam et al. U.S. Pat. No. 6499109 (hereinafter Bal) in view of 
Cox et al. U.S. Pat. No. 6253323 (hereinafter Cox). 

4. As per claim 1, Bal discloses a method, comprising: delivering the web page to an 
electronic device capable of authenticating the web page and executing at least a portion of the 
web page after the web page is authenticated based on the URL (Bal: column 2 line 43 - column 
3 line 19; column 6 lines 20-29: check whether the web site is authorized web site). Bal does not 
explicitly disclose associating a digital signature with a web page and authenticating the web 
page based on the digital signature. However, Cox discloses attaching digital signatures to web 
contents including web pages are well known in the art (Cox: column 5 lines 7-21 and column 5 
line 54 - column 6 line 12). It would have been obvious to one having ordinary skill to use the 
URL to determine whether digital signature associated with the web page is secure. Therefore, it 
would have been obvious to one having ordinary skill in the art at the time of applicant's 
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invention to combine the teachings of Cox within the system of Bal because associating digital 
signature to document such as web page provides users with certain confidence that it is safe to 
execute programs invoked by the web pages they are visiting. 

5. As per claim 2, Bal as modified discloses the method as recited in claim 1 . Bal as 
modified further discloses the associating further comprises attaching the digital signature to the 
web page (Cox: column 5 lines 66 - column 6 line 3: the digital certificate can be incorporated in 
stored electronic signal). 

6. As per claim 3, Bal as modified discloses the method as recited in claim 1 . Bal as 
modified further discloses determining if the web page includes code to invoke a control object; 
and deriving the digital signature and associating the digital signature with the web page only if 
the web page includes code to invoke a control object (Bal: column 7 lines 29-51: determined 
that a control object is present in the web page and then authenticate whether the web site is 
authorized). 

7. As per claim 4, Bal as modified discloses the method as recited in claim 1 . Bal as 
modified further discloses wherein the web page includes a confirmation module that is used by 
the electronic device to authenticate the digital signature (Cox: column 7 lines 1-21: approve 
URL; Bal: column 7 lines 41-52). 
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8. As per claim 5, Bal as modified discloses the method as recited in claim 1. Bal as 
modified further discloses wherein the web page contains script that, when executed, invokes 
executable code that is executed on the electronic device executing the web page (Bal: column 5 
lines 41-45: scripts, objects, documents, etc are included in web pages; column 6 lines 2-5: 
invoke the software object). 

9. As per claim 6, Bal as modified discloses the method as recited in claim 1. Bal as 
modified further discloses the web page is generated in an active server page (ASP) environment 
(Bal: column 5 lines 8-28: the ActiveX compatible browsers). 

10. As per claim 7, Bal discloses a method, comprising: receiving a web page from a server, 
the web page containing executable script that, when executed, invokes a control object (Bal: 
column 7 lines 26-51), the web page having URL that can be used to identifies a source of the 
web page (Bal: column 7 lines 26-51); determining whether the source of the web page is 
authentic via the URL (Bal: column 7 lines 26-51); and in an event that the source of the web 
page is authentic, displaying the web page and invoking the control object (Bal: column 7 lines 
5-10). Bal does not explicitly disclose associating a digital signature with a web page and 
authenticating the web page based on the digital signature. However, Cox discloses attaching 
digital signatures to web contents including web pages are well known in the art (Cox: column 5 
lines 7-21 and column 5 line 54 - column 6 line 12). It would have been obvious to one having 
ordinary skill to use the URL to determine whether digital signature associated with the web 
page is secure. Therefore, it would have been obvious to one having ordinary skill in the art at 
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the time of applicant's invention to combine the teachings of Cox within the system of Bal 
because associating digital signature to document such as web page provides users with certain 
confidence that it is safe to execute programs invoked by the web pages they are visiting. 

11. As per claim 8, Bal as modified discloses the method as recited in claim 7. Bal as 
modified further discloses in an event that the source of the web page is not authentic, refusing to 
invoke the control object (Bal: column 7 lines 5-10). 

12. As per claim 9, Bal as modified discloses the method as recited in claim 7. Bal as 
modified further discloses wherein the determining further comprises identifying the source of 
the web page (Cox: column 7 lines 1-21). 

13. As per claim 10, Bal discloses the method as recited in claim 7. Bal as modified further 
discloses designating one or more authorized sources from which a web page that invokes a 
control object may be received (Bal: column 6 lines 20-28: use the ICSP-authorized web site); 
and executing script contained in the web page only if the determining indicates that the web 
page was received from one of one or more authorized sources (Bal: column 7 lines 5-10). 

14. As per claim 17, Bal discloses a system, comprising: a web browser configured to access 
a web page having a URL (Bal: column 1 line 19 - column 3 line 19); a processor configured to 
execute script contained in the web page (Bal: column 1 line 19 - column 3 line 19); an 
executable control object that may be invoked by the script in the web page and is executable on 
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the processor (Bal: column 1 line 19 - column 3 line 19); and a confirmation module configured 
to authenticate the web page to determine based on authenticity of the digital signature, whether 
the control object should be invoked (Bal: column 1 line 19 - column 3 line 19; column 7 lines 
26-51). Bal does not explicitly disclose associating a digital signature with a web page and 
authenticating the web page based on the digital signature. However, Cox discloses attaching 
digital signatures to web contents including web pages are well known in the art (Cox: column 5 
lines 7-21 and column 5 line 54 - column 6 line 12). It would have been obvious to one having 
ordinary skill to use the URL to determine whether digital signature associated with the web 
page is secure. Therefore, it would have been obvious to one having ordinary skill in the art at 
the time of applicant's invention to combine the teachings of Cox within the system of Bal 
because associating digital signature to document such as web page provides users with certain 
confidence that it is safe to execute programs invoked by the web pages they are visiting. 

15. As per claim 18, Bal as modified discloses the system as recited in claim 17. Bal as 
modified further discloses wherein the confirmation module is called by the control object (Bal: 
column 6 lines 20-29). 

16. As per claim 19, Bal as modified discloses the system as recited in claim 17. Bal as 
modified further discloses wherein the confirmation module is included in the control object 
(Bal: column 6 lines 26-29). 
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17. As per claim 20, Bal as modified discloses the system as recited in claim 17. Bal as 
modified further discloses wherein the confirmation module is included in the web browser (Bal: 
column 6 lines 26-29). 

18. As per claim 21, Bal as modified discloses the system as recited in claim 17. Bal further 
discloses wherein the confirmation module is further configured to determine if the web page 
comes from a source that is authorized to invoke the control object and the control object is 
invoked only if the source of the web page is authorized to invoke the control object (Bal: 
column 7 lines 26-51). 

19. As per claim 22, Bal as modified discloses the system as recited in claim 17. Bal as 
modified further discloses wherein the confirmation module is called by the web page prior to 
the web page invoking the control object (Bal: column 7 lines 26-51). 

20. As per claim 23, Bal as modified discloses the system as recited in claim 17. Bal as 
modified further discloses wherein the digital signature module is not invoked if the web page 
does not have a digital signature (Bal: column 7 lines 29-52). 

21 . As per claim 27, Bal discloses a web browser contained on a computer-readable medium 
of a client computer, comprising computer-executable instructions that, when executed by the 
client computer, perform the following: determining if a web page contains instructions to 
invoke a control object (Bal: column 7 lines 26-51); determining if the web page has an URL; in 
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an event that the web page has an URL, authenticating the web page using the URL (Bal: column 
1 line 19 - column 3 line 19 and column 7 lines 26-51); and invoking the control object if the 
source of the web page is authenticated (Bal: column 1 line 19 - column 3 line 19; column 7 
lines 5-10). Bal does not explicitly disclose associating a digital signature with a web page and 
authenticating the web page based on the digital signature. However, Cox discloses attaching 
digital signatures to web contents including web pages are well known in the art (Cox: column 5 
lines 7-21 and column 5 line 54 - column 6 line 12). It would have been obvious to one having 
ordinary skill to use the URL to determine whether digital signature associated with the web 
page is secure. Therefore, it would have been obvious to one having ordinary skill in the art at 
the time of applicant's invention to combine the teachings of Cox within the system of Bal 
because associating digital signature to document such as web page provides users with certain 
confidence that it is safe to execute programs invoked by the web pages they are visiting. 

22. As per claim 28, Bal as modified discloses the web browser as recited in claim 27. Bal as 
modified further discloses the determining if the web page contains executable scripts to invoke 
a control object (Bal: column 7 lines 26-51); and wherein the authenticating the web page further 
comprises authenticating the web page only if the web page contains executable script to invoke 
a control object (Bal: column 7 lines 26-51). 

23. As per claim 30, Bal as modified discloses the web browser recited in claim 27. Bal as 
modified further discloses in an event that the web page does not have an associated digital 
signature, refusing to invoke the control object (Bal: column 7 lines 42-52; Cox: column 7 lines 
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1-21: it is essential to authenticate the signature, if the input parameter for authentication is 
missing, the authentication procedure has failed). 

24. As per claim 31, Bal as modified discloses the web browser as recited in claim 27. Bal as 
modified further discloses instructions to determine if an authenticated web page comes from a 
source that is authorized to invoke the control object (Bal: column 7 lines 26-51). 

25. As per claim 32, Bal discloses a control object stored in a computer-readable medium, 
comprising computer-executable instructions that, when executed on a computer, perform the 
following: authenticating a web page that invokes the control object, wherein the authenticating 
is performed based on the URL of the web page (Bal: column 6 line 13-28); and executing a 
data-handling task on the computer if the web page is determined to be authentic (Bal: column 7 
lines 5-10). Bal does not explicitly disclose associating a digital signature with a web page and 
authenticating the web page based on the digital signature. However, Cox discloses attaching 
digital signatures to web contents including web pages are well known in the art (Cox: column 5 
lines 7-21 and column 5 line 54 - column 6 line 12). It would have been obvious to one having 
ordinary skill to use the URL to determine whether digital signature associated with the web 
page is secure. Therefore, it would have been obvious to one having ordinary skill in the art at 
the time of applicant's invention to combine the teachings of Cox within the system of Bal 
because associating digital signature to document such as web page provides users with certain 
confidence that it is safe to execute programs invoked by the web pages they are visiting. 
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26. As per claim 34, Bal as modified discloses the control object as recited in claim 32. Bal 
as modified further discloses instructions to determine if a source of the web page is authorized 
to invoke the data-handling task prior to executing the data-handling task (Bal: column 6 lines 
20-29: ICSP authorized web site). 

Response to Arguments 

27. Applicant's arguments with respect to claims 1-10, 17-23, 27, 28, 30-32, and 34 have 
been considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shin-Hon Chen whose telephone number is (571) 272-3789. The 
examiner can normally be reached on Monday through Friday 8:30am to 5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Shin-Hon Chen 
Examiner 
Art Unit 2131 



